CVE-2023-33316: WordPress WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 is vulnerable to Cross Site Request Forgery (CSRF)
Published May 28, 2023
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin <= 4.9.40 versions.
Affected Software
1 affected component
WooCommerce Automatewoo Wordpress<4.9.50
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress WooCommerce Follow-Up Emails (AutomateWoo) pluginto a version that resolves this vulnerability.Fixed in 4.9.50
Event History
May 28, 2023
CVE Published
via MITRE·06:01 PM
Data Sourced
via MITRE·06:01 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-33316.
2
What is the severity of CVE-2023-33316?
CVE-2023-33316 has a severity rating of 8.8, which is considered high.
3
What is the affected software?
The affected software is WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin versions up to 4.9.40.
4
What is the CWE number associated with this vulnerability?
The CWE number associated with CVE-2023-33316 is CWE-352.
5
How can I fix this vulnerability?
To fix CVE-2023-33316, you should update WooCommerce WooCommerce Follow-Up Emails (AutomateWoo) plugin to version 4.9.50 or later.